This vulnerability in Google Chrome's Extensions UI prior to version 150.0.7871.47 allows an attacker to exploit an incorrect security UI to perform UXSS attacks. By tricking a user into installing a malicious extension, the attacker can inject arbitrary scripts or HTML through a crafted HTML page. The CVSS score is 4.2 (medium severity), reflecting limited impact with user interaction required and high attack complexity.

Successful exploitation could lead to limited confidentiality and integrity impacts through script or HTML injection in the browser context. This could allow attackers to manipulate web content or steal information within the browser session. There is no impact on availability. Exploitation requires user interaction (installing a malicious extension) and has high attack complexity.

Users and administrators should update Google Chrome to version 150.0.7871.47 or later, where this vulnerability is fixed. The vendor advisory linked confirms the availability of this update. No additional mitigation steps are indicated beyond applying the official update.